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SASE & SSE Platform 


Composable Zero Trust networking with a connectivity cloud, 
fulfilling the promise of single-vendor SASE through network 


modernization and prescriptive guidance across teams 
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Converge security & networking now 


e 75% of organizations were actively pursuing vendor 
consolidation in 20221 

e 97% plan to have an active vendor consolidation 
strategy by 2025? 

e Two years or more should be planned for, as it takes 
time to effectively consolidate’ 


Simply and securely connect any user to any 
resource without VPN or MPLS backhauling 


You need one programmable connectivity cloud with a 
built-in Zero Trust platform, L3-7 traffic firewall with 
DDoS protection, and Enhanced Internet traffic 
acceleration. Cloudflare One is a single-vendor Secure 
Access Service Edge (SASE) platform enabling 
composable on-ramps and services to be adopted in 
any order. Many start with our Zero Trust Security 
Service Edge (SSE) to reduce your attack surface, stop 
phishing or ransomware compromises, prevent lateral 
movement, and secure data in transit, at rest or in use. 
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Zero Trust 
Security 


The fastest path to a Zero Trust architecture 


Stop implicitly trusting users with excessive access 
once they’re on the corporate network. Use a proxy to 
authenticate and authorize every request into, out of, 
and between entities on your network that explicitly 
verifies identity, device posture, and business context. 
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Improve operational efficiency 


Simplify policy management, 
troubleshoot issues faster, and 
improve the user experience — 
reducing up to 80% of 
connectivity-related IT tickets. 
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Reduce cyber risk 


Harness the broadest range of 
intelligence sources from 20% 
of the Web — DNS, email, apps, 
APIs and more — for real-time 


threat insights and enforcement. 


data center server service 
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Enable your business 


Accelerate digital maturity, 
reduce hardware capex, and 
consolidate point products with 
composable, in-line security 
services that provide holistic 
visibility into network traffic. 


Everywhere security 


All services are designed to run 
in 310+ cities, so all traffic is 
inspected closest to its source, 
which delivers consistent speed 
and scale everywhere. 


REV:PMM-Q12024 


Cloudflare One | SASE & SSE Platform 


How Cloudflare One works 


One Control Plane & Interface 


Cloudflare One | —<) Zero Trust > Cloud Access Secure Web pe Firewall as WAN as 
Services Network Access Security Broker Gateway a Service a Service 
Zero Trust v VPN Routing v Load Balancing 
Security 
Network — v DDoS Protection v Analytics 
Connectivity — F en 
v Digital Experience Monitoring 
One Network 
w/ Security Built-in 
Cloudflare’s 
Connectivity Cloud 
Cloudflare A 3 z F 7 
On-ramps Clientless Access App Connector Device Client WAN Connector IP Tunnel Direct Connection 


Faster time to setup any-to-any connectivity 
with flexible on-ramps for any team 


e |T and security teams: Protect all user-to-app flows 
and secure bidirectional and site-to-site traffic. 


e Networking teams: Simplify site-to-site connectivity 
and improve TCO with a modern architecture. 


e DevOps teams: Secure modern service-to-service 
workflows and simplify mesh/P2P connectivity. 


Priority use cases and where to start 


Reduce Cyber Risk 
amidst Digital Transformation 


Adopt Zero Trust to... Protect attack surface to... 


Protect data anywhere to... 


Integrated services beyond SASE 
with a connectivity cloud 


Cloudflare One converges security and performance 
capabilities not typically built into a SASE platform 
that further reduce complexity. For example: 


e Cloud email security: Block email-borne threats. 


e Auth DNS, load balancing, and DDoS protection: 
Our reverse proxy and network services are 
built into all application access controls. 


Control Operational Costs 
amidst Innovation and Al 


Modernize networks to... Modernize apps to... 
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%* Secure contractors/BYOD * Protect distributed offices 


* Protect remote workers 
: Secure WAN 


Mitigate ransomware 
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View data exposure 


Integrate CrowdStrike ZTA Integrate CrowdStrike XDR é 


Secure M365 inboxes 


% Eliminate VPN pains %* Stop phishing & BEC + Simplify compliance + 
Manage shadow IT 
Safely use genAl 


Protect sensitive data 


Integrate M365 suite 


Integrate Purview IP 


Simplify branch * 
Reduce DMZ 
Eliminate LAN trust 
“\ Accelerate M&A 


Secure app access 


Secure privileged access 


Protect developer code 


Secure DevOps workflows 


Migrate apps to Azure 
Migrate AD to Entra ID 


Secure, Automate, and Be More Agile 


with CrowdStrike, Microsoft, and Other Partners 
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* Common first Next step 
use case use case 
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Cloudflare One | SASE & SSE Platform 


Flexible on-ramps to get started 


Any User 
Broadband 


voulue Ereddit 


y One 


programmable network 


@ viscora Tp and control plane to 
Managed devices 20% of the Internet apps build new capabilities 
add Cloudflare rewrite hyperlinks on and enforce security 
device client @ Web runs on mol 
Cloudflare controls 
\ i Googl 
A Office 365 Woe 
f 50+ private & slack o, 
Multicloud interconnects Z 100 % 


configure Anycast l zendesk 
IPSec tunnel from 


transit router 


uptime SLA for paid 
plans than only an 
Anycast-enabled 
architecture can deliver 


with Microsoft, 
Amazon, Google 


SaaS apps 
configure IdP proxy 


Data centers / HQ 
direct connection or 
configure Anycast 
GRE or IPsec tunnel 


EE Microsoft AWS 
EE Azure x7 


0 
40-65% 
faster than Zscaler, 
Netskope, and Palo Alto 
Networks for security 


services (learn more) 


Google Cloud 4) Bigital 
vmware EE Windows 


GA Self-hosted apps 
add app connector 
and/or DNS record 


310+ cities 
13,000+ interconnects 
L3 Anycast routing 
Fiber backbone 

IPv6, RPKI, TLS 1.3, and 
more standards supported 


Branch offices 
configure branch 
connector or Anycast 
GRE or IPsec tunnel 


Analyst-recognized SASE platform 


Gartner 


Only new vendor in the Gartner® 
Magic Quadrant™ for Security 
Service Edge (SSE) 2023 


Representative vendor in the 
Gartner® Market Guide for 
Zero Trust Network Access 2022 


Gartner 


peerinsights.. 


Read Cloudflare One reviews 
from peers, verified by Gartner 


Kwik 


FORRESTER 


Strong Performer in the Forrester 
Wave™ for Zero Trust Platforms 
(ZTP), Q3 2023 


Leader in the Forrester Wave™ 
for Enterprise Email Security, 
Q2 2023 


sacuppingercole 


ANALYSTS 


Leader in the KuppingerCole 
Leadership Compass for SASE 
Integration Suites 2023 
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Leader in the IDC MarketScape 


for Zero Trust Network Access 
(ZTNA) 2023 


Leader in the IDC MarketScape 
for Network Edge Security as a 
Service 2023 


OMIA 


Leader in the Omdia Market 
Radar for Zero Trust Access 
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Cloudflare One | SASE & SSE Platform 


Why Cloudflare? 


Cloudflare’s single-vendor SASE platform, Cloudflare One, is built in our connectivity cloud — 
the next evolution of the public cloud, providing a unified, intelligent platform of 
programmable, composable services that enable any-to-any connectivity between all 
networks (enterprise and Internet), clouds, apps, and users. 


Today, our consolidated security platform and connective tissue positions Cloudflare 
alongside other hyperscalers vs. other SASE point players. For instance, Cloudflare’s 
connectivity cloud offers other services that improve application performance and security, 
such as an API gateway, WAF, content delivery network (CDN), and DDoS mitigation — all of 
which can complement an organization’s SASE architecture. 


Cloudflare offers the breadth and depth needed to help organizations regain IT control 
through single-vendor SASE and beyond, accommodating deployment preferences alongside 
prescriptive guidance. As digital initiatives and security risks keep evolving faster, our network 
is the most agile to keep organizations connected and protected for the long term. 
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Simple, flexible architecture Reliable, secure connectivity Rapid, early-adopter innovation 
Fast-track your journey to secure Ensure scalable network Stay ahead of modern business 
any-to-any connectivity, for all connectivity with consistent needs to secure your future. 

your internal teams. Cloudflare protection anywhere. Deliver Zero Cloudflare is known to build and 
uniformly connects and secures Trust for your business using the ship quickly, achieving rapid, native 
end-to-end using one network and same Cloudflare proxies that route adoption of new Internet and 
control plane with security built-in. ~20% of all websites. security standards. 


Not ready yet? 


Accelerate your 


Keep learning more in our 


SASE & SSE journey Roguet a WORKSHOP SASE reference architecture 


1 Gartner, Top Trends in Cybersecurity 2022 - Vendor Consolidation, Aug 2022 
2 Gartner, Accelerate SASE Adoption by Leveraging the Security Vendor Consolidation Wàve (May 2023) 
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